precousdt[.]com[.]br
“Preço do USDT”
Resumen de las pruebas
On 21 February 2026 the domain precousdt.com.br was registered through a Gmail‑based account and delegated to the NSONE name server cluster (dns1.p06.nsone.net through dns4.p06.nsone.net). DNS resolution points to the single IPv4 address 35.157.26.135, which belongs to Amazon.com, Inc. (AS16509) and geolocates to Germany. The web service is hosted on Netlify and presents an HTTPS endpoint secured by a Let’s Encrypt certificate (issuer E7). HTTP response headers include HTTP Strict Transport Security (HSTS), indicating the site enforces TLS for future connections. The page title returned by the server is “Preço do USDT”, suggesting the site is intended to display a price for the USDT stablecoin, a common lure in cryptocurrency‑related phishing campaigns.
The domain currently appears on one public security blocklist and is actively blocked by the PhishDestroy feed. Independent scanning on VirusTotal recorded a single positive detection out of ninety‑three antivirus engines, confirming that at least one vendor has identified malicious behavior. The Gridinsoft trust score is 0 out of 100, reinforcing the classification of the host as untrustworthy. According to the risk assessment, the infrastructure is considered elevated, but the site has been taken offline at the time of this analysis.
No additional evidence such as login forms or payloads has been observed, and the exact phishing kit or dropper remains unknown. Defenders should continue to block precousdt.com.br at DNS and proxy layers, monitor the associated IP range for reuse, and add the domain to internal blocklists. Given the Netlify hosting, future re‑hosting of the same content under a new domain is plausible; therefore, threat‑intel teams should watch for similarly titled pages and reuse of the same SSL certificate fingerprint. Ongoing observation of the NSONE name servers for rapid domain turnover is also advised.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260124-C6BBA2- Título de la página capturada
- Preço do USDT
- Artefacto PDF
- Evidencia en PDF
Texto completo de la evidencia
Acceptable Use Policy (AUP): The domain precousdt.com.br is engaged in phishing activities, which is a clear violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a breach of your TOS, which reserves the right to suspend or terminate services for violations related to fraudulent activities.
Applicable Laws (BR):
Lei nº 12.737/2012 (Carolina Dieckmann Law): This law criminalizes unauthorized access to computer systems and data, which is applicable to phishing schemes that deceive users into providing sensitive information.
Lei nº 13.709/2018 (General Data Protection Law - LGPD): This law mandates the protection of personal data and prohibits its misuse, which is directly violated by phishing activities that aim to harvest personal information unlawfully.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Non-compliance with applicable laws and your own policies can result in severe penalties.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of precousdt.com.br · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.